CVE-2016-0166

CVE-2016-0166 affects Internet Explorer 11 on Windows; memory corruption can enable remote code execution or memory DOS via a crafted page. Root cause: improper handling of memory objects in IE. Impact: remote code execution in the context of the current user; requires user interaction. Remediati...

CVE-2016-3274

CVE-2016-3274 affects Microsoft Internet Explorer 9–11 and Microsoft Edge and describes a content-spoofing vulnerability where crafted URLs can mislead users. The root cause is how browsers parse HTTP content, allowing a remote attacker to redirect users to a spoofed site via a specially crafted ...

CVE-2016-3289

CVE-2016-3289 affects Microsoft Internet Explorer 11 and Microsoft Edge. The issue is a memory corruption vulnerability in the browser when handling memory objects, which an attacker can exploit via a crafted webpage to achieve remote code execution or a denial of service. Connected CNVD entries ...

CVE-2016-3327

Technical details for CVE-2016-3327 are not publicly available in the provided connected documents. They list the CVE among IE/Edge updates but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2016-3388

CVE-2016-3388 affects Microsoft Internet Explorer 10/11 and Microsoft Edge through improper restriction of access to private namespaces, enabling privilege escalation. The CIRCL/NVD entries in the connected data indicate an exploitation presence (exploit-db entry 40606), but the provided document...

CVE-2017-0202

CVE-2017-0202 is an Internet Explorer memory corruption remote code execution vulnerability. The issue occurs when IE improperly accesses memory objects, allowing an attacker to execute arbitrary code in the context of the current user. The Nessus/NPD data indicate the vulnerability was widely ad...

CVE-2017-11813

CVE-2017-11813 is a memory corruption vulnerability in Internet Explorer on Windows platforms (7 SP1, 8.1/RT 8.1, 2008 R2 SP1, 2012 R2). The root cause is how Internet Explorer handles objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The Nessus...

CVE-2007-3903

CVE-2007-3903 refers to a memory corruption vulnerability in Microsoft Internet Explorer (mshtml.dll) affecting IE6/IE7, caused by unexpected calls to HTML objects (cloneNode/nodeValue) leading to remote arbitrary code execution. OpenVAS/CP advisories link this family to MS07-069 and describe it ...

CVE-2008-1085

CVE-2008-1085 is corroborated by connected docs as a remote code execution risk in Internet Explorer across multiple versions and Windows releases, addressed by MS08-024 (Cumulative Security Update for IE). The MSKB KB947864 summary notes that this update resolves vulnerabilities that could allow...

CVE-2009-2530

CVE-2009-2530 corresponds to an Internet Explorer memory corruption vulnerability (Uninitialized Memory Corruption) that could allow remote code execution when a user views a specially crafted Web page. Connected documents show Microsoft’s MS09-054 cumulative security update for Internet Explorer...

CVE-2014-1771

CVE-2014-1771 affects Microsoft Internet Explorer 6–11 with SChannel, where during TLS renegotiation the server certificate may differ from the pre-renegotiation one. This allows MITM attackers to obtain sensitive information or modify TLS session data via a triple handshake attack. Public exploi...

CVE-2014-2821

CVE-2014-2821 affects Microsoft Internet Explorer 8 and 9. The vulnerability is a remote memory-corruption flaw exploitable via a crafted web site, enabling remote code execution or a denial of service. Public analyses reference IE memory corruption and related POC/attack vectors; remediation is ...

CVE-2014-6343

Microsoft Internet Explorer 9–11 contains a remote code execution/memory corruption vulnerability (CVE-2014-6343). ZDI notes a specific Use-After-Free flaw in handling CElement objects, where manipulating document elements can reuse a dangling pointer to execute code in the current process. The v...

CVE-2014-6374

Microsoft Internet Explorer (IE6–IE11) Memory Corruption Vulnerability (CVE-2014-6374) allows remote code execution and memory corruption when visiting a crafted web page. Several connected advisories confirm the root cause involves memory corruption in IE’s rendering/processing of content, with ...

CVE-2014-6376

CVE-2014-6376 affects Microsoft Internet Explorer 11 and describes a memory corruption vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. The CVE is presented as a distinct vulnerability from CVE-2014-6327 and CVE-2014-6329. T...

CVE-2015-1735

Microsoft Internet Explorer (IE) versions 6–11 are affected by the described memory corruption vulnerability family. The CVE-2015-1735 entry and related CVEs (CVE-2015-1740, CVE-2015-1744, CVE-2015-1745, CVE-2015-1766) all describe remote code execution or memory corruption via specially crafted ...

CVE-2015-2422

CVE-2015-2422 concerns a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 6–11. The issue allows remote code execution or a denial of service when a user visits a crafted webpage, due to how IE handles an in-memory object after it has been freed. The connected advisory...

CVE-2015-2452

CVE-2015-2452 affects Microsoft Internet Explorer (IE7–IE11). It enables remote code execution or memory corruption via a crafted web site, due to a memory corruption flaw in IE. The issue has been associated with Microsoft security bulletins MS15-079 (IE) and MS15-091 (Edge), indicating availabl...

CVE-2016-3322

CVE-2016-3322 affects Internet Explorer 11 and Edge, described as a memory corruption vulnerability that can allow remote code execution when a user visits a crafted webpage. Connected sources corroborate a memory corruption flaw in Microsoft Edge/IE causing remote code execution, with CNVD-2016-...

CVE-2016-4112

Technical details are not publicly available in the provided documents for CVE-2016-4112. Monitor for updates from vendors and security advisories before drawing conclusions about impact, affected products, or fixes.

CVE-2018-0991

CVE-2018-0991 is a remote code execution vulnerability where Internet Explorer improperly accesses objects in memory (Internet Explorer Memory Corruption Vulnerability). Affected: Internet Explorer 11 and 10. Root cause (per description): improper memory object handling could allow code execution...

CVE-2018-0996

CVE-2018-0996 is a remote code execution vulnerability in Internet Explorer arising from how the scripting engine handles objects in memory, affecting IE9, IE11, and IE10. The issue is described identically across NVD records and related CVEs (CVE-2018-0988 and CVE-2018-1001) as a scripting engin...

CVE-2018-8403

CVE-2018-8403 is a remote code execution vulnerability in how Microsoft browsers access objects in memory (the Microsoft Browser Memory Corruption Vulnerability). Affected products include Internet Explorer 11, Microsoft Edge, and Internet Explorer 10. Root cause is memory corruption when handlin...

CVE-2002-0057

The CVE-2002-0057 issue affects the Microsoft XML Core Services XMLHTTP control (MSXML) in versions 2.6, 3.0, and 4.0 where IE security zone handling is applied to redirected data streams. The flaw allows a remote attacker to read arbitrary local files by specifying a local file as the XML Data S...

CVE-2003-0816

CVE-2003-0816 applies to Internet Explorer 6 SP1 and earlier and is the Script URLs Cross Domain vulnerability (CAN-2003-0816). It allows a remote attacker to bypass IE’s cross-domain security by abusing scripted navigation and framing techniques (NavigateAndFind with file:JavaScript URLs, window...

CVE-2003-1026

CVE-2003-1026 affects Internet Explorer 5.01–6.0 (Travel Log cross-domain vulnerability). A crafted script URL stored in the travel log/subframes could bypass zone restrictions and execute in the top window’s zone when history.back is invoked, potentially allowing access to cross-domain data and ...

CVE-2004-0866

CVE-2004-0866 involves Internet Explorer 6.0. The vulnerability allows websites to set cookies for country‑specific top‑level domains (e.g., .ltd.uk, .plc.uk, .sch.uk), which could enable a remote attacker to perform a session fixation attack and hijack a user’s HTTP session. The provided documen...

CVE-2009-0551

CVE-2009-0551 describes a Page Transition Memory Corruption vulnerability in Internet Explorer affecting IE6/7 on Windows XP, Windows Server 2003, and IE7 on Windows 7-era builds, where improper handling of transition errors between consecutive HTTP documents could allow remote code execution via...

CVE-2009-3019

CVE-2009-3019 affects Microsoft Internet Explorer 6 on Windows XP SP2/SP3 and IE7 on Windows Vista. The vulnerability stems from JavaScript that creates an LI element (document.createElement) and then sets the value attribute, leading to a remote-denial-of-service condition (application crash). T...

CVE-2009-3270

CVE-2009-3270 is listed in Apple iTunes advisories as affecting iTunes pre-12.6 and tied to vulnerabilities in the expat component (and related issues in SQLite). Apple’s HT207598/HT207599 entries credit iTunes for multiple expat and SQLite flaws that could allow remote code execution or denial o...

CVE-2014-0271

The CVE-2014-0271 entry maps to a memory-corruption vulnerability in the VBScript engine used by Microsoft Internet Explorer (IE) 6–11 and VBScript 5.6–5.8. The root cause is memory handling flaws in VBScript that can be triggered by a crafted web site, enabling remote code execution or memory co...

CVE-2014-0311

CVE-2014-0311 affects Microsoft Internet Explorer 6–11 and relates to a memory corruption vulnerability triggered by visiting a crafted web site. The provided documents identify the affected software (IE 6–11) and the general impact (remote code execution or memory corruption leading to possible ...

CVE-2014-2796

Microsoft Internet Explorer 10 and 11 are affected by memory corruption vulnerabilities that can be exploited via a crafted web site to execute arbitrary code or cause a denial of service. The CVE entry CVE-2014-2796 (and related CVEs in the same IE memory corruption family) indicate remote code ...

CVE-2014-4110

CVE-2014-4110 corresponds to a family of Internet Explorer memory corruption vulnerabilities (IE 6–11). Connected ZDI advisories (e.g., ZDI-14-306, -308, -317, -315, -312, -316, -318, etc.) describe use-after-free conditions in IE objects (such as CAttrArray, CFieldSetLayout, CTableCell, CDataBin...

CVE-2015-0032

CVE-2015-0032 affects the Microsoft VBScript engine (versions 5.6–5.8) used with Internet Explorer 8–11. The memory-corruption vulnerability allows remote code execution or a DoS when a user visits a crafted website, due to how VBScript handles objects in memory. Affected products include Windows...

CVE-2015-6159

CVE-2015-6159 is described in connected CNVD entries as a memory-corruption vulnerability affecting Microsoft Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site and capable of remote code execution or denial of service. The CNVD entries label it under the umbrella of memo...

CVE-2016-0200

CVE-2016-0200 affects Microsoft Internet Explorer 9–11, enabling remote code execution or memory corruption via a crafted web site. Related entries (CVE-2016-0199, CVE-2016-3211) describe similar IE memory corruption vulnerabilities and MS16-063 coverage; no explicit remediation details for CVE-2...

CVE-2016-3324

CVE-2016-3324 is a memory-corruption vulnerability in Microsoft Internet Explorer 9–11 that allows remote code execution when a user visits a crafted page. The CIRCL/CVE registry notes an exploitation path with Exploit DB (exploits/40748), indicating in-the-wild or publicly known exploitation for...

CVE-2016-4116

CVE-2016-4116 is a Flash Player vulnerability characterized as a flaw in the dynamic-link library loading path that could enable arbitrary code execution. Connected sources confirm the issue affects the Flash Player family (including Adobe Flash Player and related plugins) across multiple platfor...

CVE-2017-8594

CVE-2017-8594 affects Internet Explorer on Windows 8.1/Windows RT 8.1 and Windows Server 2012 R2. The root cause is a memory handling issue where Internet Explorer accesses objects in memory (via Windows Text Services Framework, per MS sources), enabling remote code execution with the current use...

CVE-2018-0847

Technical details beyond the IE information disclosure description are not publicly provided in the supplied documents. Monitor for updates from the referenced sources.

CVE-2018-8249

CVE-2018-8249 concerns Microsoft Internet Explorer Memory Corruption Vulnerability affecting Internet Explorer 11. The issue is a remote code execution flaw triggered when Internet Explorer improperly accesses objects in memory. The CVSS data credits a NETWORK attack vector, HIGH impact on confid...

CVE-2019-0929

CVE-2019-0929 is Microsoft Internet Explorer Memory Corruption Vulnerability. The issue arises when Internet Explorer improperly accesses objects in memory, potentially allowing remote code execution with the current user’s privileges. Affected software is Internet Explorer on Windows; the vulner...

CVE-2000-0982

Consolidated details: The CVE affects Internet Explorer prior to version 5.5, where cached credentials for a secure site could be forwarded to insecure pages on the same site. This exposure could let remote attackers obtain credentials by monitoring connections to the web server. Root cause is th...

CVE-2001-0154

CVE-2001-0154 affects Microsoft Internet Explorer 5.5 and earlier when rendering HTML and processing MIME parts. The vulnerability arises from a MIME handling table that can cause the browser to execute an embedded attachment if a malicious MIME type is set, without user confirmation. This can al...

CVE-2004-0526

Unknown versions of Internet Explorer and Outlook are affected by a phishing-related vulnerability that allows remote attackers to spoof a legitimate URL in the status bar. The issue arises from crafting A HREF tags with modified alt values pointing to the legitimate site, combined with an image ...

CVE-2010-0246

This CVE (CVE-2010-0246) concerns Microsoft Internet Explorer 8 memory handling where uninitialized or deleted objects can cause memory corruption, enabling remote code execution. The connected MS KB (MS10-002) discusses a cumulative IE security update addressing remote-code-execution vulnerabili...

CVE-2013-0027

CVE-2013-0027 concerns a Use-After-Free in Microsoft Internet Explorer (IE 6–10) triggered by visiting a crafted page that accesses a deleted object, enabling remote code execution. Connected sources confirm the vulnerability affects IE components (notably Mshtml.dll/Mshtmled.dll variants) and th...

CVE-2014-0303

CVE-2014-0303 affects Microsoft Internet Explorer 6–8. The vulnerability allows remote code execution or memory corruption via a crafted web site due to memory corruption in IE’s handling of web objects. The issue is addressed by Microsoft’s MS14-012 cumulative update; apply the patch (and relate...

CVE-2014-2819

CVE-2014-2819 affects Microsoft Internet Explorer 7–11. The vulnerability is an elevation-of-privilege flaw that allows remote attackers to gain privileges by convincing a user to visit a crafted web page, enabling code execution with the user’s rights. Public exploits exist; several advisories r...